diff --git a/public/impressum.html b/public/impressum.html index 182e3cc..8872189 100644 --- a/public/impressum.html +++ b/public/impressum.html @@ -162,9 +162,9 @@ footer{border-top:1px solid var(--border);padding:48px 24px 32px;background:var(
Legal
- Impressum - Privacy Policy - Terms of Service + Impressum + Privacy Policy + Terms of Service
diff --git a/public/index.html b/public/index.html index 54938f4..45d24ac 100644 --- a/public/index.html +++ b/public/index.html @@ -302,13 +302,19 @@ footer{border-top:1px solid var(--border);padding:48px 24px 32px;background:var(
-
- - +
+
+ + +
+
+ + +
@@ -320,6 +326,34 @@ footer{border-top:1px solid var(--border);padding:48px 24px 32px;background:var(
+
+
+ + +
+
+ + +
+
+
+ +
+
+ + +
@@ -632,8 +666,13 @@ footer{border-top:1px solid var(--border);padding:48px 24px 32px;background:var( async function runPlayground(){ var url=document.getElementById('pg-url').value; var format=document.getElementById('pg-format').value; + var quality=parseInt(document.getElementById('pg-quality').value)||80; var width=parseInt(document.getElementById('pg-width').value)||1280; var height=parseInt(document.getElementById('pg-height').value)||800; + var fullPage=document.getElementById('pg-fullpage').checked; + var deviceScale=parseInt(document.getElementById('pg-scale').value)||1; + var waitUntil=document.getElementById('pg-waituntil').value; + var waitForSelector=document.getElementById('pg-selector').value.trim()||undefined; if(!url){alert('Please enter a URL');return} var btn=document.getElementById('pg-btn'); @@ -646,11 +685,14 @@ async function runPlayground(){ placeholder.style.display='none';result.style.display='none';error.style.display='none'; loading.style.display='flex'; + var body={url:url,format:format,width:width,height:height,fullPage:fullPage,quality:quality,deviceScale:deviceScale,waitUntil:waitUntil}; + if(waitForSelector)body.waitForSelector=waitForSelector; + try{ var r=await fetch('/v1/playground',{ method:'POST', headers:{'Content-Type':'application/json'}, - body:JSON.stringify({url:url,format:format,width:width,height:height}) + body:JSON.stringify(body) }); if(!r.ok){var d=await r.json().catch(function(){return{}});throw new Error(d.error||'HTTP '+r.status)} var blob=await r.blob(); diff --git a/public/privacy.html b/public/privacy.html index 9b478bb..5741a90 100644 --- a/public/privacy.html +++ b/public/privacy.html @@ -298,9 +298,9 @@ footer{border-top:1px solid var(--border);padding:48px 24px 32px;background:var(
Legal
- Impressum - Privacy Policy - Terms of Service + Impressum + Privacy Policy + Terms of Service
diff --git a/public/terms.html b/public/terms.html index 717b7f9..d1b0619 100644 --- a/public/terms.html +++ b/public/terms.html @@ -236,7 +236,7 @@ footer{border-top:1px solid var(--border);padding:48px 24px 32px;background:var(

6. Data & Privacy

Legal
- Impressum - Privacy Policy - Terms of Service + Impressum + Privacy Policy + Terms of Service
diff --git a/src/index.ts b/src/index.ts index b9f1876..1ffb5cc 100644 --- a/src/index.ts +++ b/src/index.ts @@ -122,6 +122,11 @@ app.get("/openapi.json", (_req, res) => { app.get("/docs", (_req, res) => { res.sendFile(path.join(__dirname, "../public/docs.html")); }); +// Clean URLs for legal pages (redirect /privacy → /privacy.html, etc.) +for (const page of ["privacy", "terms", "impressum", "status"]) { + app.get(`/${page}`, (_req, res) => res.redirect(301, `/${page}.html`)); +} + // Static files (landing page) app.use(express.static(path.join(__dirname, "../public"), { etag: true })); diff --git a/src/routes/playground.ts b/src/routes/playground.ts index 764a144..ece1592 100644 --- a/src/routes/playground.ts +++ b/src/routes/playground.ts @@ -84,7 +84,7 @@ const playgroundLimiter = rateLimit({ * schema: { $ref: "#/components/schemas/Error" } */ playgroundRouter.post("/", playgroundLimiter, async (req, res) => { - const { url, format, width, height } = req.body; + const { url, format, width, height, fullPage, quality, waitForSelector, deviceScale, waitUntil } = req.body; if (!url || typeof url !== "string") { res.status(400).json({ error: "Missing required parameter: url" }); @@ -95,6 +95,14 @@ playgroundRouter.post("/", playgroundLimiter, async (req, res) => { const safeWidth = Math.min(Math.max(parseInt(width, 10) || 1280, 320), 1920); const safeHeight = Math.min(Math.max(parseInt(height, 10) || 800, 200), 1080); const safeFormat = ["png", "jpeg", "webp"].includes(format) ? format : "png"; + const safeFullPage = fullPage === true; + const safeQuality = safeFormat === "png" ? undefined : Math.min(Math.max(parseInt(quality, 10) || 80, 1), 100); + const safeDeviceScale = Math.min(Math.max(parseInt(deviceScale, 10) || 1, 1), 3); + const validWaitUntil = ["load", "domcontentloaded", "networkidle0", "networkidle2"]; + const safeWaitUntil = validWaitUntil.includes(waitUntil) ? waitUntil : "domcontentloaded"; + // Sanitize waitForSelector — allow simple CSS selectors only (no script injection) + const safeWaitForSelector = typeof waitForSelector === "string" && /^[a-zA-Z0-9\s\-_.#\[\]=:"'>,+~()]+$/.test(waitForSelector) && waitForSelector.length <= 200 + ? waitForSelector : undefined; try { const result = await takeScreenshot({ @@ -102,9 +110,11 @@ playgroundRouter.post("/", playgroundLimiter, async (req, res) => { format: safeFormat as "png" | "jpeg" | "webp", width: safeWidth, height: safeHeight, - fullPage: false, - quality: safeFormat === "png" ? undefined : 70, - deviceScale: 1, + fullPage: safeFullPage, + quality: safeQuality, + deviceScale: safeDeviceScale, + waitUntil: safeWaitUntil as any, + waitForSelector: safeWaitForSelector, }); // Add watermark